$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft File: E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft (raw, json) Hash identifier: McDvgpBaR+/LX6AneDSYChU40mJbPkAaYqQMjmUD+6w= Subject key identifier: 6C:0C:8E:18:B4:26:55:45:53:D5:5D:AA:A1:20:F4:17:C1:13:DF:07 Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A Certificate issuer: /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A Certificate serial: 63685338550F53B371C53EB01902915AF481C800 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft Manifest number: 0303 Signing time: Mon 03 Nov 2025 11:08:31 +0000 Manifest this update: Mon 03 Nov 2025 11:03:31 +0000 Manifest next update: Tue 04 Nov 2025 12:10:31 +0000 Files and hashes: 1: 323830343a353235633a383030303a3a2f33362d3336203d3e20323638353133.roa (hash: FTvDEBTNhZxUx4Wwesrz4nPs2kc4gBONP7OJI1hTUKA=) 2: 323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa (hash: k7Cps3+eIlN6mGwxmxwBBdDtrwqJ0NrqOwtZPyjRkcc=) 3: 34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa (hash: lMO4yrGYKBsUZj4SQzp3jpNg7boVqwI/fiTvmKjGnsw=) 4: 323830343a353235633a3a2f33332d3333203d3e2030.roa (hash: Lu5tI3bab0yVpaMkEht0vltP1sEpwacsN9GxBccqYVs=) 5: 34352e3136312e3231352e302f32342d3234203d3e20323732343433.roa (hash: BLujKG2gSv7syxoPIqaGaSVEU01iUhqoVq29d26g9O4=) 6: 34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa (hash: G7wQUhvhHpijhQs42Ii1L4We2ULgAoI84qVGh0IQBjs=) 7: 34352e3136312e3231322e302f32332d3233203d3e2030.roa (hash: 0fIlHaiRFL/5h0Jlb6hFh1tBD45uuRABtXqzM0swN/8=) 8: E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl (hash: NvrrSH+PvO2guRVBtAVfwv7xJbPnWCTcBbQkJmrB3uE=) 9: 34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa (hash: R+0tDEsU/RuP7vJ7CQ4vzc4tWKCkAat0n1JGl6uBSPs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:68:53:38:55:0f:53:b3:71:c5:3e:b0:19:02:91:5a:f4:81:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A Validity Not Before: Nov 3 11:03:31 2025 GMT Not After : Nov 4 12:10:31 2025 GMT Subject: CN=6C0C8E18B426554553D55DAAA120F417C113DF07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:d9:a0:f5:ec:5f:23:a2:21:4c:0f:1c:39: 4d:a6:1b:92:bd:c1:e6:7d:b0:01:1e:cc:40:7d:f2: aa:50:cc:70:32:8e:0e:24:47:8c:15:83:95:e8:bd: 02:8d:c9:9b:2f:dc:e4:d1:c4:55:61:b3:a0:e2:2f: 9b:fe:39:23:6d:a3:77:e2:59:31:c3:57:99:ee:2d: f1:c4:ba:a0:b7:62:d5:a2:ff:9e:f7:df:63:6a:aa: b3:29:21:ff:a1:83:ab:1a:c7:7b:fb:6c:03:68:72: 0d:ed:98:5e:3b:7b:06:c4:7a:7b:f8:10:25:3e:d2: fc:21:11:d8:35:9f:c2:4b:91:27:f8:53:0f:b4:26: 72:5f:e4:28:d5:20:fd:7b:40:a1:e7:7b:83:d4:33: c5:d8:2e:93:ee:06:90:69:8c:7a:8d:88:b0:20:fd: 62:67:d6:a6:a2:2c:c1:c7:e5:9a:2f:f9:46:81:f8: 79:70:d5:28:08:6c:08:1e:55:4d:29:1b:c0:e9:37: ec:ee:8d:a5:69:a8:37:b7:ef:05:bf:16:8b:52:cb: d8:3f:90:9b:db:66:fb:19:1b:7c:35:ca:c8:69:aa: d6:a9:aa:40:eb:e0:35:b8:e1:4e:07:3f:c5:0a:b6: ff:c1:93:a2:b9:a1:7a:f7:32:45:15:7b:e6:fe:69: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0C:8E:18:B4:26:55:45:53:D5:5D:AA:A1:20:F4:17:C1:13:DF:07 X509v3 Authority Key Identifier: keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c0:d7:fe:72:60:1b:1c:92:3a:5e:4a:54:ac:29:2e:69:34: 7d:90:b2:ae:20:41:af:53:7c:b1:69:8c:7f:35:e8:3b:2b:8d: f1:6b:a4:dc:0d:67:88:0b:03:ef:dc:6f:84:60:52:fe:20:72: c3:8c:8b:b1:09:7c:cc:b1:3e:fa:86:7c:c7:fb:12:3a:1c:0d: 26:7c:40:b2:5a:c5:69:dc:7f:93:f4:16:ae:3c:68:ba:66:ff: e0:47:6e:a3:54:a8:b0:89:1e:b4:5c:60:bc:1a:8a:ff:8e:0f: b8:d8:fc:f3:45:29:f0:b4:b0:62:eb:04:8a:56:00:aa:07:12: e2:65:67:d9:17:36:34:0f:92:d6:37:c7:7f:f5:da:e0:92:d0: 57:d7:00:c3:3d:16:18:2b:4e:4a:fe:64:6b:c7:d9:9c:c8:bd: 47:0b:b4:d5:e2:45:84:1c:a2:e5:e9:66:fd:42:71:74:7b:66: 99:f8:7a:e2:88:00:3d:8c:5d:c4:3a:89:f7:78:d0:92:c6:1d: 71:c6:e0:c9:aa:bc:58:a3:af:f2:95:59:61:f8:52:c0:3a:52: 3e:80:9f:94:77:53:9e:66:e9:4f:1d:3f:d2:47:40:b3:08:4a: 33:d1:d2:c5:d0:cc:5f:9f:bb:e0:1d:9d:6b:e6:cc:5c:2b:f8: f4:bd:31:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY2hTOFUPU7NxxT6wGQKRWvSByAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTREOENDRDk3N0MyMkM3ODZCQzFGMTczRkM0RTc3OTJF OEE0NDIwQTAeFw0yNTExMDMxMTAzMzFaFw0yNTExMDQxMjEwMzFaMDMxMTAvBgNV BAMTKDZDMEM4RTE4QjQyNjU1NDU1M0Q1NURBQUExMjBGNDE3QzExM0RGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfNmg9exfI6IhTA8cOU2mG5K9 weZ9sAEezEB98qpQzHAyjg4kR4wVg5XovQKNyZsv3OTRxFVhs6DiL5v+OSNto3fi WTHDV5nuLfHEuqC3YtWi/57332NqqrMpIf+hg6sax3v7bANocg3tmF47ewbEenv4 ECU+0vwhEdg1n8JLkSf4Uw+0JnJf5CjVIP17QKHne4PUM8XYLpPuBpBpjHqNiLAg /WJn1qaiLMHH5Zov+UaB+Hlw1SgIbAgeVU0pG8DpN+zujaVpqDe37wW/FotSy9g/ kJvbZvsZG3w1yshpqtapqkDr4DW44U4HP8UKtv/Bk6K5oXr3MkUVe+b+aewLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbAyOGLQmVUVT1V2qoSD0F8ET3wcwHwYDVR0j BBgwFoAU5NjM2XfCLHhrwfFz/E53kuikQgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGZhdnBQVVlFdGFEWHp1bUJvQmo0ZmhQVTV2Y21Ld0ozSEJ1cmRlWkJi b2IvMS9FNEQ4Q0NEOTc3QzIyQzc4NkJDMUYxNzNGQzRFNzc5MkU4QTQ0MjBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RDhDQ0Q5NzdDMjJDNzg2 QkMxRjE3M0ZDNEU3NzkyRThBNDQyMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGZhdnBQVVlFdGFEWHp1bUJvQmo0ZmhQVTV2Y21Ld0ozSEJ1cmRlWkJib2IvMS9F NEQ4Q0NEOTc3QzIyQzc4NkJDMUYxNzNGQzRFNzc5MkU4QTQ0MjBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM8DX/nJgGxySOl5KVKwpLmk0fZCyriBBr1N8sWmMfzXoOyuN8Wuk3A1niAsD 79xvhGBS/iByw4yLsQl8zLE++oZ8x/sSOhwNJnxAslrFadx/k/QWrjxoumb/4Edu o1SosIketFxgvBqK/44PuNj880Up8LSwYusEilYAqgcS4mVn2Rc2NA+S1jfHf/Xa 4JLQV9cAwz0WGCtOSv5ka8fZnMi9Rwu01eJFhByi5elm/UJxdHtmmfh64ogAPYxd xDqJ93jQksYdccbgyaq8WKOv8pVZYfhSwDpSPoCflHdTnmbpTx0/0kdAswhKM9HS xdDMX5+74B2da+bMXCv49L0xQg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:28 2025 by rpki-client